Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
File: bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft (raw, json)
Hash identifier: PKJ/7gOvAaiJu8jTCukmuoK54lOTTbZW0XVOgesUk7s=
Subject key identifier: DD:20:77:97:00:53:33:A9:A4:80:F6:92:95:36:96:A1:5A:4A:F3:D5
Authority key identifier: 6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F
Certificate issuer: /CN=6dffcb87c2246fa389c428e0f153edf259e5450f
Certificate serial: 019EC149C0246958FEF29B006BC6BD10E733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
Manifest number: 0157
Signing time: Sat 13 Jun 2026 14:01:36 +0000
Manifest this update: Sat 13 Jun 2026 14:01:36 +0000
Manifest next update: Sun 14 Jun 2026 14:01:36 +0000
Files and hashes: 1: bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl (hash: CtpBggcZkF7A394/K6IokdEQ3XJdMMDE8b02znwFKKU=)
2: cQwjsCo9gkIA6iPJNtB7F11xkU0.roa (hash: v4xVa178+XaCuwEjmAANdS9KMbdbv5lyk3k50cP3nxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:c0:24:69:58:fe:f2:9b:00:6b:c6:bd:10:e7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dffcb87c2246fa389c428e0f153edf259e5450f
Validity
Not Before: Jun 13 14:01:36 2026 GMT
Not After : Jun 14 14:01:36 2026 GMT
Subject: CN=dd207797005333a9a480f692953696a15a4af3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:a3:b6:06:32:26:19:18:4d:a7:80:42:99:
c4:e4:ea:b9:7c:ff:c0:56:9b:ba:3e:d1:1d:00:d7:
84:d1:d5:a7:53:40:17:7c:77:ee:7a:7b:7f:f5:19:
b7:d4:b7:f1:8a:09:20:72:fc:2b:5d:f3:f1:a5:d2:
fe:b6:80:6b:77:bd:47:ac:ad:52:0c:72:11:d8:d4:
83:a6:73:3e:57:85:30:86:c7:8d:3a:6f:27:5f:c6:
1b:d1:00:89:bc:d4:a7:6a:68:ef:f2:ee:38:be:0f:
f5:2c:65:a0:d1:2d:79:f7:96:34:36:44:99:f2:9e:
58:46:23:3b:98:be:55:57:3c:dd:d1:e7:d9:27:e3:
67:61:28:b4:47:a3:de:1e:04:63:bc:ec:0c:c2:6f:
1d:1e:c1:45:82:1b:51:f0:c2:bb:b8:ff:fb:55:cb:
0c:58:11:88:60:89:68:d8:f0:42:7e:f1:dc:71:fe:
33:06:5d:d7:08:80:2d:b9:27:7e:c2:75:f3:90:1a:
74:cd:65:77:c5:0b:c2:53:36:e6:0b:34:03:e0:96:
94:3f:71:63:91:ee:4d:fa:59:c6:a4:0d:da:d9:9a:
4c:fc:91:e5:3d:b8:b1:69:0f:58:b3:4c:8d:fa:62:
37:a8:eb:b2:e7:f8:05:6d:9d:10:37:a6:c1:4a:c9:
3d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:77:97:00:53:33:A9:A4:80:F6:92:95:36:96:A1:5A:4A:F3:D5
X509v3 Authority Key Identifier:
keyid:6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0b:68:ba:70:ca:18:08:64:fe:18:20:8f:21:c6:ef:12:4b:
b0:aa:ed:fb:85:13:c9:30:0c:eb:39:53:44:0f:94:9a:25:58:
00:93:17:ce:59:5e:d7:0d:b8:63:c3:61:63:03:9f:25:4c:23:
81:af:fe:f0:10:da:d9:35:9a:8f:b9:48:ed:91:04:f8:11:b1:
7a:23:96:2a:cc:6a:0d:4c:0f:d5:dd:c6:78:30:67:dc:7f:45:
22:76:f6:93:41:16:4b:ce:0b:31:b5:aa:1d:21:cf:55:58:a9:
4a:07:48:9c:cb:d6:24:45:41:4a:2d:0f:c0:25:a8:5f:f8:d9:
3c:07:bd:d5:58:b7:f8:5c:2f:b7:a0:bc:f2:d7:50:fd:25:ce:
60:fb:3d:8d:0d:39:28:82:30:65:2b:1c:9a:fd:d5:30:b7:fa:
af:0c:7d:50:d6:f0:59:ff:9f:59:9f:d0:e8:b6:ba:74:5b:ee:
4d:fa:a3:9f:25:fe:5c:1d:d5:38:4d:ed:7a:c7:92:0d:1f:7f:
22:87:85:af:82:59:ff:fb:c3:79:9a:61:8e:76:81:10:70:21:
57:8b:68:9a:68:47:cf:05:75:62:a5:b8:cf:8f:46:54:b4:c6:
62:a6:02:5e:cb:82:80:ac:31:7f:36:c3:aa:04:94:31:83:52:
91:6f:00:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:59:37 2026 by rpki-client